Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier: 2+DAQ0hFQrExqj2CLO6xsZQH0sUeNl5E/ZQ6SUwSLaY=
Subject key identifier: 10:BF:9B:A6:37:3D:1E:B3:94:52:27:CE:63:8C:6E:4B:CA:29:5E:E2
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial: 0196892553CC0937874D84184B12782D32FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number: 1517
Signing time: Thu 01 May 2025 00:00:46 +0000
Manifest this update: Thu 01 May 2025 00:00:46 +0000
Manifest next update: Fri 02 May 2025 00:00:46 +0000
Files and hashes: 1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=)
2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: f1HlhdPAoCuiKkf1piKF+/VTRO8foUy6WQqQEnO2KQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:25:53:cc:09:37:87:4d:84:18:4b:12:78:2d:32:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Validity
Not Before: May 1 00:00:46 2025 GMT
Not After : May 2 00:00:46 2025 GMT
Subject: CN=10bf9ba6373d1eb3945227ce638c6e4bca295ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:67:e0:74:b1:f2:64:1b:b1:38:21:b6:de:
3c:8d:9c:cc:52:31:e6:57:fe:80:70:0f:be:80:9d:
bb:ae:06:b9:fe:91:0a:30:90:d5:c7:e7:38:49:95:
23:4f:ae:7c:01:2b:62:a2:e3:61:b5:e0:19:b7:80:
4d:33:b6:5e:f8:c3:ab:54:f3:48:b4:1a:80:bf:f8:
03:59:a1:65:d3:63:56:aa:e1:d1:d8:2c:3d:23:e2:
67:62:a0:f0:56:24:f3:8f:df:05:17:11:57:23:2c:
ba:2d:a2:ed:86:a7:ff:55:6e:33:bb:82:a6:ed:70:
68:c2:e7:08:22:66:53:39:84:d0:69:1c:86:03:6a:
42:c7:9f:56:49:8c:ba:4b:4a:9c:be:00:41:3c:cf:
f2:92:b7:75:00:63:81:a3:e4:24:51:4d:ab:03:85:
6e:74:04:23:96:2f:b6:dd:13:be:58:90:70:b4:48:
09:75:86:e1:25:6b:67:2e:ee:a0:d5:73:eb:11:32:
09:85:85:d6:e7:c7:2b:08:78:86:30:c1:d9:98:ff:
00:e5:7e:b1:ab:e2:9a:1c:15:fb:fd:9c:9d:48:bf:
6b:f1:83:da:20:71:7b:99:26:6a:10:80:36:40:9e:
d6:ed:35:df:eb:24:32:39:e8:1a:c2:b1:61:89:f2:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BF:9B:A6:37:3D:1E:B3:94:52:27:CE:63:8C:6E:4B:CA:29:5E:E2
X509v3 Authority Key Identifier:
keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:45:4f:28:4b:02:25:0f:7a:2d:fe:3a:1c:0b:ca:cc:1a:37:
d9:68:81:71:8c:6c:39:e9:f4:d3:86:bd:7d:b8:24:16:1a:bd:
f2:1a:f1:d1:65:0a:e1:78:b4:e6:bc:8f:36:31:7a:00:e6:2d:
75:0c:61:87:78:a8:a8:5b:02:9e:db:29:48:79:c6:4d:51:15:
e1:91:05:4d:92:8c:24:65:96:f2:5d:23:6a:c4:a9:54:4f:90:
ea:c8:93:1b:9f:4d:03:bc:15:02:23:ae:fe:a6:79:b3:5e:f2:
92:bc:34:18:17:38:a1:f8:77:e7:64:fc:c9:eb:40:e3:59:2a:
33:ab:dc:d0:d7:0d:07:dd:d1:9d:77:65:32:33:d0:da:7f:79:
9c:fc:cc:83:bd:a6:37:c6:a4:e7:d8:e9:bb:40:de:b3:16:87:
1c:76:56:26:f2:9f:36:dd:fc:2c:70:a1:72:72:01:4e:36:16:
e0:82:62:98:5d:51:8b:33:aa:76:ea:09:ab:5b:4c:12:0f:d0:
1e:21:41:66:f4:88:89:ef:d7:dd:7c:e4:61:77:4c:e8:0c:ec:
fd:b3:df:97:82:aa:2e:52:9c:f1:c8:02:06:e4:19:1e:15:98:
00:1d:ec:09:07:1a:74:1d:96:77:79:2f:ad:b7:79:b9:f0:5e:
bf:e2:fc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:38 2025 by rpki-client